{"list":"other","total":111,"rows":[{"id":"1602.05629","title":"Communication-Efficient Learning of Deep Networks from Decentralized Data","created":"2016-02-17","cited_by_count":7669},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1706.02216","title":"Inductive Representation Learning on Large Graphs","created":"2017-06-07","cited_by_count":6320},{"id":"2203.00667","title":"Generative Adversarial Networks","created":"2022-03-01","cited_by_count":5627},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1607.00133","title":"Deep Learning with Differential Privacy","created":"2016-07-01","cited_by_count":2728},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"2012.07805","title":"Extracting Training Data from Large Language Models","created":"2020-12-14","cited_by_count":2189},{"id":"1511.06434","title":"Unsupervised Representation Learning with Deep Convolutional Generative Adversarial Networks","created":"2015-11-19","cited_by_count":2054},{"id":"1703.06114","title":"Deep Sets","created":"2017-03-10","cited_by_count":1421},{"id":"1906.08935","title":"Deep Leakage from Gradients","created":"2019-06-21","cited_by_count":1021},{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878},{"id":"1802.08232","title":"The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks","created":"2018-02-22","cited_by_count":864},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1702.01135","title":"Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks","created":"2017-02-03","cited_by_count":744},{"id":"2003.14053","title":"Inverting Gradients -- How easy is it to break privacy in federated learning?","created":"2020-03-31","cited_by_count":712},{"id":"1907.00503","title":"Modeling Tabular data using Conditional GAN","created":"2019-07-01","cited_by_count":699},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1911.03030","title":"Certified Data Removal from Machine Learning Models","created":"2019-11-08","cited_by_count":535},{"id":"1805.04049","title":"Exploiting Unintended Feature Leakage in Collaborative Learning","created":"2018-05-10","cited_by_count":520},{"id":"1806.01246","title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","created":"2018-06-04","cited_by_count":498},{"id":"1512.09300","title":"Autoencoding beyond pixels using a learned similarity metric","created":"2015-12-31","cited_by_count":407},{"id":"2007.14321","title":"Label-Only Membership Inference Attacks","created":"2020-07-28","cited_by_count":388},{"id":"2001.02610","title":"iDLG: Improved Deep Leakage from Gradients","created":"2020-01-08","cited_by_count":382},{"id":"1610.05755","title":"Semi-supervised Knowledge Transfer for Deep Learning from Private Training Data","created":"2016-10-18","cited_by_count":348},{"id":"1702.07464","title":"Deep Models Under the GAN: Information Leakage from Collaborative Deep Learning","created":"2017-02-24","cited_by_count":334},{"id":"2104.07586","title":"See through Gradients: Image Batch Recovery via GradInversion","created":"2021-04-15","cited_by_count":326},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321},{"id":"1812.02766","title":"Knockoff Nets: Stealing Functionality of Black-Box Models","created":"2018-12-06","cited_by_count":292},{"id":"2003.10595","title":"Systematic Evaluation of Privacy Risks of Machine Learning Models","created":"2020-03-24","cited_by_count":292},{"id":"1908.11229","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","created":"2019-08-29","cited_by_count":271},{"id":"1911.07135","title":"The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networks","created":"2019-11-17","cited_by_count":246},{"id":"2004.00053","title":"Information Leakage in Embedding Models","created":"2020-03-31","cited_by_count":203},{"id":"2005.02205","title":"When Machine Unlearning Jeopardizes Privacy","created":"2020-05-05","cited_by_count":198},{"id":"1703.06490","title":"Generating Multi-label Discrete Patient Records using Generative Adversarial Networks","created":"2017-03-19","cited_by_count":197},{"id":"1909.10594","title":"MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples","created":"2019-09-23","cited_by_count":197},{"id":"1807.05852","title":"Machine Learning with Membership Privacy using Adversarial Regularization","created":"2018-07-16","cited_by_count":186},{"id":"2003.02133","title":"Threats to Federated Learning: A Survey","created":"2020-03-04","cited_by_count":178},{"id":"1906.11798","title":"Stolen Memories: Leveraging Model Memorization for Calibrated White-Box Membership Inference","created":"2019-06-27","cited_by_count":175},{"id":"1709.07886","title":"Machine Learning Models that Remember Too Much","created":"2017-09-22","cited_by_count":169},{"id":"2007.15528","title":"Membership Leakage in Label-Only Exposures","created":"2020-07-30","cited_by_count":168},{"id":"1805.02628","title":"PRADA: Protecting against DNN Model Stealing Attacks","created":"2018-05-07","cited_by_count":165},{"id":"2002.12200","title":"Entangled Watermarks as a Defense against Model Extraction","created":"2020-02-27","cited_by_count":149},{"id":"1905.10291","title":"Privacy Risks of Securing Machine Learning Models against Adversarial Examples","created":"2019-05-24","cited_by_count":141},{"id":"1910.12366","title":"Thieves on Sesame Street! Model Extraction of BERT-based APIs","created":"2019-10-27","cited_by_count":139},{"id":"1306.4447","title":"Hacking Smart Machines with Smarter Ones: How to Extract Meaningful Data from Machine Learning Classifiers","created":"2013-06-19","cited_by_count":130},{"id":"2102.06387","title":"The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregation","created":"2021-02-12","cited_by_count":128},{"id":"1904.01067","title":"Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learning","created":"2019-04-01","cited_by_count":122},{"id":"1906.03006","title":"Reconstruction and Membership Inference Attacks against Generative Models","created":"2019-06-07","cited_by_count":122},{"id":"2005.02131","title":"Stealing Links from Graph Neural Networks","created":"2020-05-05","cited_by_count":115},{"id":"1901.10513","title":"Adversarial Examples Are a Natural Consequence of Test Error in Noise","created":"2019-01-29","cited_by_count":114},{"id":"2005.10881","title":"Revisiting Membership Inference Under Realistic Assumptions","created":"2020-05-21","cited_by_count":112},{"id":"2010.10152","title":"Feature Inference Attack on Model Predictions in Vertical Federated Learning","created":"2020-10-20","cited_by_count":106},{"id":"2012.02670","title":"Unleashing the Tiger: Inference Attacks on Split Learning","created":"2020-12-04","cited_by_count":105},{"id":"2005.03161","title":"MAZE: Data-Free Model Stealing Attack Using Zeroth-Order Gradient Estimation","created":"2020-05-06","cited_by_count":99},{"id":"2002.02730","title":"Machine Unlearning: Linear Filtration for Logit-based Classifiers","created":"2020-02-07","cited_by_count":95},{"id":"1811.11264","title":"Synthesizing Tabular Data using Generative Adversarial Networks","created":"2018-11-27","cited_by_count":92},{"id":"1802.04889","title":"Understanding Membership Inferences on Well-Generalized Learning Models","created":"2018-02-13","cited_by_count":90},{"id":"1807.05185","title":"Model Reconstruction from Model Explanations","created":"2018-07-13","cited_by_count":86},{"id":"1811.02054","title":"Exploring Connections Between Active Learning and Model Extraction","created":"2018-11-05","cited_by_count":85},{"id":"2010.00906","title":"Quantifying Privacy Leakage in Graph Embedding","created":"2020-10-02","cited_by_count":82},{"id":"1906.10908","title":"Prediction Poisoning: Towards Defenses Against DNN Model Stealing Attacks","created":"2019-06-26","cited_by_count":81},{"id":"2101.06570","title":"Membership Inference Attack on Graph Neural Networks","created":"2021-01-17","cited_by_count":81},{"id":"2101.01341","title":"Practical Blind Membership Inference Attack via Differential Comparisons","created":"2021-01-05","cited_by_count":78},{"id":"2201.10787","title":"Variational Model Inversion Attacks","created":"2022-01-26","cited_by_count":75},{"id":"1912.12115","title":"Split Learning for collaborative deep learning in healthcare","created":"2019-12-27","cited_by_count":73},{"id":"1810.09957","title":"NSML: Meet the MLaaS platform with a real-world case study","created":"2018-10-08","cited_by_count":70},{"id":"2007.09339","title":"ML Privacy Meter: Aiding Regulatory Compliance by Quantifying the Privacy Risks of Machine Learning","created":"2020-07-18","cited_by_count":70},{"id":"2210.00968","title":"Membership Inference Attacks Against Text-to-image Generation Models","created":"2022-10-03","cited_by_count":69},{"id":"2108.06504","title":"LinkTeller: Recovering Private Edges from Graph Neural Networks via Influence Analysis","created":"2021-08-14","cited_by_count":65},{"id":"1805.04810","title":"AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learning","created":"2018-05-13","cited_by_count":60},{"id":"2009.03728","title":"Adversarial Machine Learning in Image Classification: A Survey Towards the Defender's Perspective","created":"2020-09-08","cited_by_count":59},{"id":"2109.08045","title":"Membership Inference Attacks Against Recommender Systems","created":"2021-09-16","cited_by_count":57},{"id":"2203.01925","title":"Label-Only Model Inversion Attacks via Boundary Repulsion","created":"2022-03-03","cited_by_count":56},{"id":"2203.11894","title":"GradViT: Gradient Inversion of Vision Transformers","created":"2022-03-22","cited_by_count":53},{"id":"2106.02820","title":"GraphMI: Extracting Private Graph Data from Graph Neural Networks","created":"2021-06-05","cited_by_count":50},{"id":"2104.12669","title":"Exploiting Explanations for Model Inversion Attacks","created":"2021-04-26","cited_by_count":49},{"id":"2202.03335","title":"Membership Inference Attacks and Defenses in Neural Network Pruning","created":"2022-02-07","cited_by_count":45},{"id":"1705.08504","title":"Interpreting Blackbox Models via Model Extraction","created":"2017-05-23","cited_by_count":44},{"id":"1812.11720","title":"Stealing Neural Networks via Timing Side Channels","created":"2018-12-31","cited_by_count":43},{"id":"2201.09370","title":"Are Your Sensitive Attributes Private? Novel Model Inversion Attribute Inference Attacks on Classification Models","created":"2022-01-23","cited_by_count":43},{"id":"1711.07221","title":"Model Extraction Warning in MLaaS Paradigm","created":"2017-11-20","cited_by_count":40},{"id":"1803.05961","title":"Chiron: Privacy-preserving Machine Learning as a Service","created":"2018-03-15","cited_by_count":40},{"id":"1802.02601","title":"Digital Watermarking for Deep Neural Networks","created":"2018-02-06","cited_by_count":39},{"id":"2103.03228","title":"One for One, or All for All: Equilibria and Optimality of Collaboration in Federated Learning","created":"2021-03-04","cited_by_count":39},{"id":"1606.05893","title":"You are Who You Know and How You Behave: Attribute Inference Attacks via Users' Social Friends and Behaviors","created":"2016-06-19","cited_by_count":34},{"id":"2109.05659","title":"Source Inference Attacks in Federated Learning","created":"2021-09-13","cited_by_count":34},{"id":"2111.07608","title":"Property Inference Attacks Against GANs","created":"2021-11-15","cited_by_count":33},{"id":"2103.07101","title":"On the (In)Feasibility of Attribute Inference Attacks on Machine Learning Models","created":"2021-03-12","cited_by_count":31},{"id":"2105.02866","title":"Membership Inference Attacks on Deep Regression Models for Neuroimaging","created":"2021-05-06","cited_by_count":22},{"id":"2203.02077","title":"User-Level Membership Inference Attack against Metric Embedding Learning","created":"2022-03-04","cited_by_count":22},{"id":"1909.11835","title":"GAMIN: An Adversarial Approach to Black-Box Model Inversion","created":"2019-09-26","cited_by_count":19},{"id":"2010.08762","title":"Layer-wise Characterization of Latent Information Leakage in Federated Learning","created":"2020-10-17","cited_by_count":19},{"id":"2104.13061","title":"Property Inference Attacks on Convolutional Neural Networks: Influence and Implications of Target Model's Complexity","created":"2021-04-27","cited_by_count":19},{"id":"2203.09566","title":"Leveraging Adversarial Examples to Quantify Membership Information Leakage","created":"2022-03-17","cited_by_count":19},{"id":"1602.03552","title":"Learning Privately from Multiparty Data","created":"2016-02-10","cited_by_count":16},{"id":"2206.14724","title":"Private Graph Extraction via Feature Explanations","created":"2022-06-29","cited_by_count":16},{"id":"2112.13416","title":"Attribute Inference Attack of Speech Emotion Recognition in Federated Learning Settings","created":"2021-12-26","cited_by_count":12},{"id":"2104.08273","title":"Membership Inference Attacks on Knowledge Graphs","created":"2021-04-16","cited_by_count":11}],"next_cursor":"100"}